9a299eb3d7269abb2335dd06538e56ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a299eb3d7269abb2335dd06538e56ed
Size

60KB
MD5

9a299eb3d7269abb2335dd06538e56ed
SHA1

60be9702318945143ad78167cc30ff98dc84bb45
SHA256

87e25175212aa010f90136c51bad95bd465f2ab9ad0349895203b233d5e128b3
SHA512

a3191ac3e1b98ff61d529481f515192cb0cb01d4d1f73e30fab55fba7936b71446a5e9af7cf73ac5dd1cfdd9f71c9355e5bf3bacfaed8fece4a7feb5c3d07e61
SSDEEP

768:Qzti+pt+6OxwbioJNDL8AmWnKbl9bR5tHZd+E8Ub6Lvg6SjT6PjevY3bP:2tip6OCbZJNDnmWUJHf8UbgY69Sqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a299eb3d7269abb2335dd06538e56ed

Files

9a299eb3d7269abb2335dd06538e56ed
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\windows\Documents\Desktop\hookstub\hookstub\obj\Release\hookstub.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ